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WHAT IS CLAIMED IS: 

1. In a wireless network having at least two access points (APs), 
each AP having a predetermined service area, and a station (STA) that receives a 

5 communication service by associating with a first AP being one of the at least 
two APs, a method of supporting a roaming service for the STA at the first AP, 
comprising the steps of: 

generating an AP-neighborhood graph containing neighbor APs to which 
the STA can move; 

10 acquiring proactive keys for the neighbor APs based on association 

information gained from the association of the STA to the first AP; and 

transmitting the proactive keys to the neighbor APs by proactive caching, 
whereby performing a pre-authentication such that when the STA 
attempts to roam to one of the neighbor APs, fast roaming is provided via a 
15 proactive key provided to the neighbor AP. 

2. . The method of claim 1, wherein an AP-neighborhood graph is 
generated at each of the at least two APs. 

20 3. ' method of claim 2, wherein the neighbor APs are APs 

within a distance less than a predetermined threshold, to which the STA can 
move from the first AP without being by way of any other AP. 

4. The method of claim 1, wherein the association information 
25 includes a pairwise" master key (PMK: PMKcurr) and a roam key (RK) which are 
acquired at the first AP, and the MAC addresses of the STA and the neighbor APs 
(STA moe and next AP mac ), and a PMK (PMK ftEXl ) for each of the neighbor APs is 
acquired using the association information and determined by 
• ' ••<••.. . : 

30 PMK n0 x,= PRF(RK, PMK curi , STA mttc , next AP^) 
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5, The method of claim 4, wherein the RK is determined by 
RK = PRF(PMK, "Roam Key", AP*,™, STA W ncc) 

5 

where APnonce is a random number set by the first AP, STA non c« is a random 
number set by the STA, and "Roam Key" is a random number generated during 
generating PTK^, using PMK^. 

Sir 

10 6. In a wireless network having at least two access points (APs), 

each AP having a predetermined service area, and a station (STA) that receives a 
communication service by associating with a first AP being one of the at least 
two APs, a method of supporting a roaming service for the STA at a neighbor AP 
of the first AP, the neighbor "AP being managed by an AP-neighborhood graph 

1 5 drawn for the first AP, comprising the steps of: 

receiving a proactive key from the first AP by proactive caching, among 
proactive keys generated for neighbor APs using association information gained 
from the association of the STA to the first AP by the first AP; and 

performing fast roaming using the proactive key when the STA attempts 

20 to roam to a neighbor AP. 

7. The method of claim 6, wherein the association information 
includes a pah-wise master key (PMK: PMK^j,) and a roam key (RK) which are 
acquired at the first AP, and the MAC addresses of the STA and the neighbor APs 
25 (STA^ and next AP^), and a PMK (PMK nex ,) for each of the neighbor APs is 
acquired using the association information and determined by 

PMK nwl = PRf (RK, PMKurt, STA m , c> next APm*) 
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8. The method of claim 7, wherein the RK is determined by 

RK = PRF(PMK, "Roam Key", AP^, STA,^) 

5 where AP nonw is a random number set by the first AP, STA™* is a random 
number set by the STA, and "Roam Key" is a random number generated during 
generating PTK^ using PMK CUfT . 

9. In a wireless network having at least two access points (APs), 
10 each AP having a predetermined service area, and a station (STA) that receives a 

communication service by associating to a first AP being one of the APs, a 
method of supporting a roaming service between the first AP and a neighbor AP 
of the first AP, the neighbor AP being managed by an AP-neighborhood graph 
drawn for the first AP, comprising the steps of: 

15 acquiring proactive keys for neighbor APs based on association 

information and transmitting the proactive keys to the neighbor APs by proactive 
caching, the association information being gained from the association of the 
STA to the first AP by the first AP; and 

receiving a proactive key from the first AP and performing fast roaming 

20 using the proactive key at a neighbor AP when the STA attempts to roam to the 
neighbor AP. 

10. The method of claim 9, wherein the association information 
includes a pairwise master key (PMK: PMK™,) and a roam key (RK) which are 

25 acquired at the first AP, and the MAC addresses of the STA and the neighbor APs 
(STA mac and next Af mc ), and a PMK (PMK^O for each of the neighbor APs is 
acquired using the association information and determined by 

PMK^,« PRF(RK, PMlCc^ STA^, next AP^) 
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11. The method of claim 10, wherein the RK is determined by 
RK - PRF(PMK, "Roam Key", AP^ STA***) 

5 

where AP n0 nce is a random number set by the first AP, STA nonce is a random 
number set by the STA, and "Roam Key" is a random number generated during 
generating PTK^ using PMK^. 

10 12. In a wireless network having at least two access points (APs), 

each AP having a predetermined service area, a station (STA) that receives a 
communication service by associating with a first AP being one of the at least 
two APs, an authentication server (AS) that authenticates the STA, and an 
accounting server that provides billing for the STA, a method of supporting a 
1 5 roaming service for the STA, comprising the steps of: 

generating at the accounting server an AP-neighborhood graph for the 
first AP to manage neighbor APs to which the STA can move from the first AP; 

notifying by the accounting server when the first AP reports to the 
accounting server completed association of the STA to the first AP the neighbor 
20 APs of the association; 

requesting a proactive key to the AS in response to the notification from 
the accounting server by each of the neighbor APs; 

generating a proactive key for each of the neighbor APs based on 
association information from the association of the STA to the first AP in 
25 response to the request and transmitting the proactive key to the neighbor AP by 
the AS; and 

performing a pre-authentication when the STA attempts to roam to one 
of the neighbor APs, so that fast roaming can be carried out using the proactive 
key provided to the neighbor AP. 
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13. The method of 12, wherein the accounting server generates an 
AP-neighborhood graph for each of the at least two APs. 

5 14. The method of claim 13, wherein the neighbor APs are APs 

within a distance less than a predetermined threshold, to which the STA can 
move from the first AP without being by way of any other AP. 

15. The mejjjod of claim 12, wherein the association information 
10 includes a master key (MK), a pairwise master key (PMK: PMK cur r) assigned to 
the first AP, and the MAC addresses of the STA and the neighbor APs (STA mac 
and next AP msc ), and a PMK (PMK™,) for each of the neighbor APs is acquired 
using the association information and determined by 

1 5 PMK nm = PRF(MK. PMK C u,„ STA™. next AP mw ) 
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